Traffic Trace Info
DumpFile: 201305241400.dump
FileSize: 3941.99MB
Id: 201305241400
StartTime: Fri May 24 14:00:01 2013
EndTime: Fri May 24 14:15:01 2013
TotalTime: 899.95 seconds
TotalCapSize: -1054.87MB CapLen: 96 bytes
# of packets: 59037906 (29391.48MB)
AvgRate: 273.94Mbps stddev:46.06M
IP flow (unique src/dst pair) Information
# of flows: 20730236 (avg. 2.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 1.9% 1.6% 1.5% 1.5% 1.5% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 16292093
Top 10 bandwidth usage (bytes/total in %):
6.5% 5.4% 4.9% 4.6% 4.3% 4.2% 3.4% 3.1% 2.9% 2.7%
# of IPv6 addresses: 10434
Top 10 bandwidth usage (bytes/total in %):
9.0% 9.0% 8.6% 7.6% 7.6% 7.0% 6.9% 5.4% 5.3% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305241400.pktlen.png)
detailed numbers
[ 32- 63]: 25993367
[ 64- 127]: 10990481
[ 128- 255]: 1213921
[ 256- 511]: 1469819
[ 512- 1023]: 1233986
[ 1024- 2047]: 18136332
Protocol Breakdown
![[protocol breakdown chart]](201305241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59037906 (100.00%) 30819203240 (100.00%) 522.02
ip 56335433 ( 95.42%) 28668920012 ( 93.02%) 508.90
tcp 29650385 ( 50.22%) 25904773882 ( 84.05%) 873.67
http(s) 16121183 ( 27.31%) 19975055724 ( 64.81%) 1239.06
http(c) 8781757 ( 14.87%) 2623846442 ( 8.51%) 298.78
squid 10559 ( 0.02%) 6553803 ( 0.02%) 620.68
smtp 94530 ( 0.16%) 44309377 ( 0.14%) 468.73
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 43378 ( 0.07%) 2945058 ( 0.01%) 67.89
pop3 4015 ( 0.01%) 1662892 ( 0.01%) 414.17
imap 4097 ( 0.01%) 1454075 ( 0.00%) 354.91
telnet 1576 ( 0.00%) 105415 ( 0.00%) 66.89
ssh 90975 ( 0.15%) 10026294 ( 0.03%) 110.21
dns 99473 ( 0.17%) 6120708 ( 0.02%) 61.53
bgp 583 ( 0.00%) 165023 ( 0.00%) 283.06
napster 34 ( 0.00%) 3442 ( 0.00%) 101.24
realaud 309 ( 0.00%) 35014 ( 0.00%) 113.31
rtsp 230 ( 0.00%) 178906 ( 0.00%) 777.85
icecast 527 ( 0.00%) 130778 ( 0.00%) 248.16
hotline 7 ( 0.00%) 420 ( 0.00%) 60.00
other 4397150 ( 7.45%) 3232180391 ( 10.49%) 735.06
udp 4782150 ( 8.10%) 1310272569 ( 4.25%) 273.99
dns 907968 ( 1.54%) 268684241 ( 0.87%) 295.92
rip 1 ( 0.00%) 91 ( 0.00%) 91.00
realaud 6 ( 0.00%) 532 ( 0.00%) 88.67
halflif 37 ( 0.00%) 4914 ( 0.00%) 132.81
starcra 14 ( 0.00%) 2319 ( 0.00%) 165.64
everque 53 ( 0.00%) 8911 ( 0.00%) 168.13
unreal 3 ( 0.00%) 246 ( 0.00%) 82.00
quake 17 ( 0.00%) 1469 ( 0.00%) 86.41
cuseeme 1 ( 0.00%) 97 ( 0.00%) 97.00
other 3872628 ( 6.56%) 1041225224 ( 3.38%) 268.87
icmp 21520978 ( 36.45%) 1357847671 ( 4.41%) 63.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12157 ( 0.02%) 3424162 ( 0.01%) 281.66
ip6 335128 ( 0.57%) 85967804 ( 0.28%) 256.52
other 34450 ( 0.06%) 6614654 ( 0.02%) 192.01
frag 59273 ( 0.10%) 62603489 ( 0.20%) 1056.19
ip6 2702473 ( 4.58%) 2150283228 ( 6.98%) 795.67
tcp6 2592232 ( 4.39%) 2119302653 ( 6.88%) 817.56
http(s) 1452367 ( 2.46%) 1819941073 ( 5.91%) 1253.09
http(c) 998367 ( 1.69%) 100364257 ( 0.33%) 100.53
smtp 318 ( 0.00%) 221996 ( 0.00%) 698.10
ftp 70 ( 0.00%) 6727 ( 0.00%) 96.10
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 948 ( 0.00%) 705237 ( 0.00%) 743.92
bgp 104 ( 0.00%) 24374 ( 0.00%) 234.37
other 139986 ( 0.24%) 198026539 ( 0.64%) 1414.62
udp6 76628 ( 0.13%) 22581243 ( 0.07%) 294.69
dns 75345 ( 0.13%) 22413526 ( 0.07%) 297.48
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1280 ( 0.00%) 167399 ( 0.00%) 130.78
icmp6 28561 ( 0.05%) 3420070 ( 0.01%) 119.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5022 ( 0.01%) 4975182 ( 0.02%) 990.68
tcpdump file: 201305241400.dump.gz (1290.87 MB)